Security Bulletin: Potential denial of service vulnerability in WebSphere Application Server may affect IBM InfoSphere Identity Insight (CVE-2019-4046)

Summary

There is a potential denial of service vulnerability in WebSphere Application Server shipped as part of IBM InfoSphere Identity Insight.

Vulnerability Details

CVE(s):CVE-2019-4046

Link to security bulletin: <https://www-01.ibm.com/support/docview.wss?uid=ibm10869570&gt;

Affected Products and Versions

IBM InfoSphere Identity Insight 9.0

IBM InfoSphere Identity Insight 8.1

Remediation/Fixes

IBM InfoSphere Identity Insight version 9.0: Apply WebSphere Liberty fix pack 19.0.0.4 or later.

IBM InfoSphere Identity Insight version 8.1: Upgrade to WebSphere Application Server Fix Pack 7.0.0.45, and then apply Interim Fix PH06340. DISCLAIMER: This version of the product uses Java 6, which is now beyond end of support. Customers using Identity Insight 8.x are encouraged to move to Identity Insight 9.